PRIVACY POLICY & COOKIES
www.goholeshots.com

§ 1 General provisions

1. The administrator of personal data of users of the website under the domain www.goholeshots.com is Żaneta Rysio, running a business under the name HOLESHOTS Żaneta Rysio, entered into the Central Register and Information on Economic Activity of the Republic of Poland kept by the minister responsible for economy, with its registered office at: ul. . 11 Listopada 5D/6, 22-200 Włodawa, NIP: 5651529916, REGON: 386445036 (hereinafter: “Administrator”).
2. Contact with the Administrator is possible:
   a) to the e-mail address: info@goholeshots.com
   b) in writing, to the Administrator’s address: ul. November 11, 5D/6, 22-200 Włodawa.
3. The purpose of the Policy is to define actions taken in the field of personal data collected via the Administrator’s website and related services and tools used by its users, as well as as part of the activity of concluding and implementing contracts in contact outside the website.
4. If necessary, the provisions of this Policy may be changed. The change will be communicated to users by announcing the new content of the Policy, and in the case of the database of persons who have consented to the processing of data by e-mail or provided e-mail data when performing contracts, they will also be notified of the change by e-mail.

§ 2 Basis for processing, purposes and storage of personal data

1. Users’ personal data is processed in accordance with the General Regulation on the Protection of Personal Data, the Personal Data Protection Act, the Personal Data Protection Act of May 10, 2018 and the Electronic Services Act of July 18, 2002.
2. In the case of processing personal data on the basis of an e-mail sent by the user or a complaint, such processing takes place on the basis of art. 6 sec. 1 lit. b of the General Data Protection Regulation, according to which data processing is necessary in order to take action at the request of the data subject.
3. In the event of obtaining a separate consent of the user, his personal data may also be processed by the administrator for marketing purposes, including for the purpose of sending commercial information by electronic means to the e-mail address indicated by the user (Article 6(1)(a) of the General Regulation on Data Protection).
4. If the Administrator concludes and performs a sales contract or contracts for the provision of services, the other party is obliged to provide the data necessary to conclude the contract (which is a contractual requirement, and in the field of tax numbers also a statutory requirement) and for this purpose the Administrator processes personal data (Article 6 para. 1 letter b of the General Data Protection Regulation).
5. In the case of conducting research and analysis to improve the operation of available services (e.g. tracking tools), art. 6 sec. 1 lit. f of the General Data Protection Regulation.
6. Users’ personal data is stored no longer than it is necessary to achieve the purpose of processing, i.e. until the consent is withdrawn, if the processing is based on such consent, until the claims of the Administrator and the other party for the performance of concluded contracts expire (in the case of sales contracts). /contracts for the provision of services 2 years, counting until the end of the year) and until the inquiry sent via e-mail is fulfilled or until the complaint is considered.
7. The Administrator may use profiling for direct marketing purposes, but decisions made on its basis by the Administrator do not concern the conclusion or refusal to conclude a contract, or the possibility of using electronic services. The effect of using profiling may be, for example, granting a given person a discount, sending them a discount code, reminding them about unfinished purchases, sending a product proposal that may match the interests or preferences of a given person, or offering better conditions compared to the standard offer. Despite profiling, it is the person who freely decides whether he or she will want to take advantage of the discount received in this way, or better conditions and make a purchase. Profiling consists in the automatic analysis or forecasting of a given person’s behavior on the Administrator’s website, e.g. by adding a specific product to the basket, browsing a specific product page, or by analyzing the previous activity history on the website. The condition for such profiling is that the Administrator has the personal data of a given person in order to be able to send him, for example, a discount code.
8. To the extent necessary for the proper functioning of the website, its functionality, the website may, when using it by the User, collect other information, including, but not limited to:
   IP address;
   device, hardware and software information such as hardware identifiers, mobile device identifiers (e.g. Apple Identifier for Advertising [“IDFA”] or Android Device Advertising ID [“AAID”]),
   platform type,
   settings and components,
   installed software
   the presence of the necessary plugins;
   approximate geolocation data (based on IP address or device settings);
   web browser data, including browser type and preferred language.

§ 3 Data Sharing

1. The administrator ensures that all collected personal data is used to fulfill obligations towards users. This information will not be shared with third parties, except when:
   a) prior express consent of the persons concerned to such action is given, or
   b) if the obligation to provide this data results or will result from applicable law, e.g. to law enforcement authorities.
2. In addition, personal data of service recipients and clients may be transferred to the following recipients or categories of recipients:
   – service providers supplying the Administrator with technical, IT and organizational solutions, enabling the Administrator to run a business, including a website and electronic services provided through it (in particular computer software providers, marketing agencies, e-mail and hosting providers, company management software providers and providing technical assistance to the Administrator and the product delivery operator, e.g. couriers). The Administrator provides the collected personal data of the Customer to the selected supplier acting on his behalf only in the case and to the extent necessary to achieve a given purpose of data processing in accordance with this privacy policy.
   – providers of accounting, legal and advisory services providing the Administrator with accounting, legal or advisory support (in particular an accounting office, law firm or debt collection company) – the Administrator provides the collected personal data of the Customer to a selected supplier acting on his behalf only in the case and to the extent necessary to complete the given the purpose of data processing in accordance with this privacy policy.
   – The Administrator may share anonymized data (i.e. data that does not identify specific Users) with external service providers in order to better recognize the attractiveness of advertisements and services for users, and in this respect, due to the seat of software providers, data may be transferred – subject to the principles of their protection – to third countries, however, providing standard contractual provisions approved by the European Commission in the field of personal data processing or having appropriate powers to do so on the basis of bilateral data processing agreements between the European Union and a given third country, which is not a member of the European Economic Area. These entities in the case of the Administrator are:
   – Google LLC. (registered office: 1600 Amphitheater Parkway, Mountain View, CA 94043, USA) for Google Analytics tools used to analyze website statistics, Google Tag manager: used to manage scripts by easily adding code fragments to a website or application and tracking activities performed by users in website, Google Ads used to display sponsored links in Google search results and on websites cooperating under the Google AdSense program,
   – Meta Platforms, Inc. (registered office: 1601 Willow Road Menlo Park, CA 94025, USA) for Facebook pixel used to track conversions from Facebook ads, optimize them based on collected data and statistics, and build a list of recipients focused on future ads.4. The Administrator’s website may use the functionality of Google Analytics, a web analytics service provided by Google, LLC. (“Googles”). Google Analytics uses cookies to help website operators analyze how visitors use the website. The information generated by the cookie about the use of the website by visitors is generally transmitted to and stored by Google on servers in the United States. In accordance with current IT standards, the IP addresses of users visiting the Administrator’s website are shortened. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. On behalf of the Administrator, Google will use this information to evaluate the website for its users, to compile reports on website activity and to provide other services related to website activity and Internet usage for website operators. Google will not associate the IP address transmitted as part of Google Analytics with any other data in its possession. More information on how Google Analytics collects and uses data can be found on the official Google website at: www.google.com/policies/privacy/partners. In addition, each User can prevent the collection and processing of data by Google regarding their use of the website by downloading and installing the browser plug-in at the following link: https://tools.google.com/dlpage/gaoptout.

§ 4 User’s rights

1. The user whose personal data is processed has the right to:
a) access, rectification, limitation, deletion or transfer – the data subject has the right to request from the Administrator access to his personal data, rectification, deletion (“right to be forgotten”) or limitation of processing and has the right to raise objections against processing, and has the right to transfer his data. Detailed conditions for the exercise of the above-mentioned rights are indicated in art. 15-21 of the GDPR Regulation.
b) withdrawal of consent at any time – a person whose data is processed by the Administrator on the basis of consent (pursuant to art. 6 par. 1 letter a) or art. 9 sec. 2 lit. a) of the GDPR Regulation), it has the right to withdraw consent at any time without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.
c) lodging a complaint to the supervisory body – the person whose data is processed by the Administrator has the right to lodge a complaint to the supervisory body in the manner and mode specified in the provisions of the GDPR Regulation and Polish law, in particular the Act on the Protection of Personal Data. The supervisory authority in Poland is the President of the Office for Personal Data Protection in Warsaw.
d) objection – the data subject has the right to object at any time – for reasons related to his particular situation – to the processing of personal data concerning him based on art. 6 sec. 1 lit. e) (public interest or tasks) or f) (legitimate interest of the administrator), including profiling based on these provisions. In this case, the administrator is no longer allowed to process this personal data, unless he demonstrates the existence of valid legally justified grounds for processing, overriding the interests, rights and freedoms of the data subject, or grounds for establishing, investigating or defending claims.
e) objection to direct marketing – if personal data is processed for the purposes of direct marketing (based on the legitimate interest of the Administrator, not on the basis of the consent of the data subject), the data subject has the right to object to the processing of data at any time her personal data for the purposes of such marketing, including profiling, to the extent that the processing is related to such direct marketing.
2. The implementation of the above rights is based on the user’s request sent to the e-mail address info@goholeshots.com. Such a request should include the user’s first and last name.
3. The user ensures that the data provided or published by him on the website are correct.

§ 5 Cookies

1. “Cookies” should be understood as IT data, in particular text files, stored on users’ end devices (usually on a computer hard drive or in a mobile device) used to save specific settings and data by the user’s browser in order to use websites. These files allow to recognize the user’s device and properly display the website, ensuring comfort during its use. Storing “cookies” enables the appropriate preparation of the website and the offer in terms of user preferences – the server recognizes it and remembers, among others. preferences such as: visits, clicks, previous actions.
2. “Cookies” contain, in particular, the domain name of the website from which they come, the time of their storage on the end device and a unique number used to identify the browser from which the connection to the website is made.
3. Cookies are used to:
   a) adapting the content of websites to the user’s preferences and optimizing the use of websites,
   b) creating anonymous statistics that, by helping to determine how the user uses websites, enable improvement of their structure and content,
   c) providing website users with advertising content tailored to their interests.
   “Cookies” are not used to identify the user and their identity is not established on their basis.
4. The basic division of “cookies” is their distinction into:
   a) Necessary “cookies” – they are absolutely necessary for the proper functioning of the website or the functionalities that the user wants to use, because without them we would not be able to provide many of the services we offer. Some of them also ensure the security of the services we provide electronically.
   b) “Cookies” of a functional nature – they are important for the operation of the website due to the fact that:
   – serve to enrich the functionality of websites; without them, the website will work properly, but it will not be adapted to the user’s preferences,
   – serve to ensure a high level of website functionality; without them, the level of functionality of the website may decrease, but their absence should not prevent you from using it completely,
   – they serve most of the website’s functionalities; blocking them will prevent the selected functions from working properly.
   c)  Business “cookies” – enable the implementation of a business model based on which the website is made available; blocking them will not make the entire functionality unavailable, but may reduce the level of service provision due to the inability of the website owner to realize revenues subsidizing its operation. This category includes, for example, advertising “cookies”.
   d) “Cookies” used to configure websites – enable settings of functions and services on websites.
   e) “Cookies” for the security and reliability of websites – they enable verification of authenticity and optimization of website performance.
   f) “Cookies” used for authentication – they make it possible to inform when the user is logged in, thanks to which the website can show relevant information and functions.
   g) “Cookies” that examine the state of the session – they enable saving information on how users use the website. They may concern the most frequently visited pages or possible error messages displayed on some pages. Cookies used to save the so-called “session state” cookies help improve services and enhance your browsing experience.
   h) “Cookies” files that examine the processes taking place on the website – they enable the smooth operation of the website and the functions available on it.
   i) “cookies” that support advertising – they enable the display of advertisements that are more interesting for users, and at the same time more valuable for publishers and advertisers; “cookies” can also be used to personalize advertising, as well as to display advertisements outside websites.
   j) “Cookies” accessing the location – they allow you to adjust the displayed information to the user’s location.
5. The use of “cookies” in order to adjust the content of websites to the user’s preferences does not, as a rule, mean the collection of any information allowing the identification of the user, although this information may sometimes be of the nature of personal data, i.e. data that allows assigning certain behaviors to a specific user. Personal data collected using “cookies” may be collected only for the purpose of performing specific functions for the user. Such data is encrypted in a way that prevents access to it by unauthorized persons.
6. Cookies used by this website are not harmful to the user or to the end device used by him, therefore, for the proper functioning of the website, it is recommended not to disable their use in browsers. In many cases, the software used for browsing websites (web browser) by default allows the storage of information in the form of “cookies” and other similar technologies in the user’s end device. The user can change the way cookies are used by the browser at any time. To do this, change your browser settings. The method of changing the settings varies depending on the software (web browser) you are using. You will find appropriate tips on the subpages, depending on the browser you are using.
7. “Cookies” are also used to facilitate logging in to the user’s account, including via social media, and to enable switching between subpages on websites without having to log in again on each subpage. At the same time, “cookies” are used to secure websites, e.g. to prevent access by unauthorized persons.
8. The Administrator may use Internet log files (which contain technical data such as your IP address) to monitor traffic on its services, solve technical problems, detect and prevent fraud, and enforce the provisions of the User Agreement.
9. Detailed information on changing the settings for Cookies and their self-removal in the most popular web browsers is available in the help section of the web browser and on the following websites (just click on the link):

   in the Chrome browser

   in Firefox

   in the Opera browser

   in Safari

   in the Microsoft Edge browser

   10. Detailed information on managing cookies on a mobile phone or other mobile device should be found in the manual of a given mobile device.